COHHS OCRFirst filing
Filed Jul 27, 2020bd_f6f54a270eb5a37a
Children's Hospital Colorado reported to HHS OCR on 2020-07-27 a Hacking/IT Incident affecting 2,553 individuals, with breached information located in Email accounts. OCR investigated two related phishing incidents (2017 and 2020): one compromising an email account (3,370 individuals' PHI) due to disabled MFA, and another where workforce members granted unknown third parties access to three email accounts (10,840 individuals' PHI). OCR found HIPAA Privacy and Security Rule violations. A civil money penalty of $548,265 was imposed in 2024.
Affected (this filing): 2,553
HHS notified